Page 121 / 182 Scroll up to view Page 116 - 120
PRG AV4202N
© (2007) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.
114
OGU 930500275-A1
Advanced Section
Access the File Server settings either from its link in the 'Storage' tab under the
'Services' screen, or by clicking the 'File Server' icon in the 'Advanced' screen.
The 'File Server' screen will appear.
Enabled.
Check or un-check this box to enable or disable this feature. NetBIOS
Workgroup Discus’ workgroup name that will be displayed in the Windows net-
work map of LAN hosts.
File Server Shares.
Define file shares on your disk partitions.
FIGURE 15.
File Server Panel
IP ADDRESS
DISTRIBUTION
Your gateway's Dynamic Host Configuration Protocol (DHCP) server makes it
possible to easily add computers that are configured as DHCP clients to the
home network. It provides a mechanism for allocating IP addresses and deliver-
ing network configuration parameters to such hosts. Router's default DHCP
server is the LAN bridge.
Page 122 / 182
PRG AV4202N
© (2007) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.
Advanced Section
OGU 930500275-A1
115
A client (host) sends out a broadcast message on the LAN requesting an IP ad-
dress for itself. The DHCP server then checks its list of available addresses and
leases a local IP address to the host for a specific period of time and simultane-
ously designates this IP address as `taken'. At this point the host is configured
with an IP address for the duration of the lease.
The host can choose to renew an expiring lease or let it expire. If it chooses to
renew a lease then it will also receive current information about network ser-
vices, as it did with the original lease, allowing it to update its network configura-
tions to reflect any changes that may have occurred since it first connected to
the network. If the host wishes to terminate a lease before its expiration it can
send a release message to the DHCP server, which will then make the IP ad-
dress available for use by others.
Your gateway's DHCP server:
Displays a list of all DHCP host devices connected to the Router
Defines the range of IP addresses that can be allocated in the LAN
Defines the length of time for which dynamic IP addresses are allocated
Provides the above configurations for each LAN device and can be config-
ured and enabled/disabled separately for each LAN device
Can assign a static lease to a LAN PC so that it receives the same IP ad-
dress each time it connects to the network, even if this IP address is within
the range of addresses that the DHCP server may assign to other computers
Provides the DNS server with the host name and IP address of each PC that
is connected to the LAN
Additionally, the Router can act as a DHCP relay, escalating DHCP responsibili-
ties to a WAN DHCP server. In this case,
PRG AV4202N will act merely as a
router, while its LAN hosts will receive their IP addresses from a DHCP server
on the WAN.
With the Router's optional Zero Configuration Technology feature, the IP Auto
Detection method detects statically-defined IP addresses in addition to the
Router's DHCP clients. It learns all the IP addresses on the LAN, and integrates
the collected information with the database of the DHCP server. This allows the
DHCP server to issue valid leases, thus avoiding conflicting IP addresses used
by other computers in the network.
Page 123 / 182
PRG AV4202N
© (2007) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.
116
OGU 930500275-A1
Advanced Section
FIGURE 16.
IP Address Distribution Panel
IPSEC
Internet Protocol Security (IPSec) is a series of guidelines for the protection of
Internet Protocol (IP) communications. It specifies procedures for securing pri-
vate information transmitted over public networks. The IPSec protocols include:
AH (Authentication Header) provides packet-level authentication, ESP (Encap-
sulating Security Payload) provides encryption and authentication, IKE (Internet
Key Exchange) negotiates connection parameters, including keys, for the other
two services.
Services supported by the IPSec protocols (AH, ESP) include confidentiality
(encryption), authenticity (proof of sender), integrity (detection of data tamper-
ing), and replay protection
(defense against unauthorized resending of data). IPSec also specifies meth-
odologies for key management. Internet Key Exchange (IKE), the IPSec key
management protocol, defines a series of steps to establish keys for encrypting
and decrypting information; it defines a common language on which communi-
cations between two parties is based. Developed by the Internet Engineering
Task Force (IETF), IPSec and IKE together standardize the way data protection
is performed, thus making it possible for security systems developed by differ-
ent vendors to interoperate.
Access this feature either from the 'VPN' menu item under the 'Services' tab, or
by clicking its icon in the 'Advanced' screen. The 'Internet Protocol Security (IP-
Sec)' screen appears.
Block Unauthorized IP
Select the 'Enabled' check box to block unauthorized
IP packets to Discus. Specify the following parameters:
Maximum Number of Authentication Failures
The maximum number of
packets to authenticate before blocking the origin's IP address.
Page 124 / 182
PRG AV4202N
© (2007) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.
Advanced Section
OGU 930500275-A1
117
Block Period (in seconds)
The timeframe during which Discus will drop
packets from an unauthorized IP address.
Enable Anti-Replay Protection
Select this option to enable dropping of pack-
ets that are recognized (by their sequence number) as already been received.
Connections
This section displays the list of IPSec connections.
FIGURE 17.
IPSec Panel
L2TP SERVER
Access this feature either from its link in the 'VPN' tab under the 'Services'
screen, or by clicking the 'L2TP' icon in the 'Advanced' screen. This screen en-
ables you to configure the following:
Enabled
Select or deselect this check box to enable or disable this feature.
Note that checking this box creates an L2TP server (if not yet created with the
wizard), but does not define remote users.
Click Here to Create VPN Users
Click this link to define remote users that will
be granted access to your home network.
Protect L2TP Connection by IPSec
By default, the L2TP connection is not
protected by the IP Security (IPSec) protocol. Check this option to enable this
feature. When enabled, the following entry appears.
Create Default IPSec Connection
When creating an L2TP Server with the
connection wizard, a default IPSec connection is created to protect it. If you
wish to disable this feature, uncheck this option. However, note that if L2TP pro-
Page 125 / 182
PRG AV4202N
© (2007) Pirelli Broadband Solutions S.p.A. All Rights Reserved. Proprietary Use Pursuant to Cover Page Instructions.
118
OGU 930500275-A1
Advanced Section
tection is enabled by IPSec (see previous entry), you must provide an alterna-
tive, active IPSec connection in order for users to be able to connect. When this
feature is enabled, the following entry appears.
L2TP Server IPSec Shared Secret
You may change the IPSec shared secret,
provided when the connection was created, in this field.
Remote Address Range
Use the 'Start IP Address' and 'End IP Address' fields
to specify the range of IP addresses that will be granted by the L2TP server to
the L2TP client.
FIGURE 18.
IPSec Panel
MAC CLONING
A Media Access Control (MAC) address is the numeric code that identifies a
device on a network, such as your external cable/DSL modem or a PC network
card. Your service provider may ask you to supply the MAC address of your PC,
external modem, or both.
When replacing an external modem with the Router, you can simplify the instal-
lation process by copying the MAC address of your existing PC to the router. In
such a case, you do not need to delay the setup process by informing your ser-
vice provider of newly installed equipment.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top